System and method for rotating data in crypto system

Abstract

A system and method for cryptography. The system may include a cryptography module in communication with a database and configured to perform cryptography operations on data in the database, a rotation module configured to rotate data in the database, and one or more application interfaces configured to remain responsive while the rotation module rotates the data in the database. Rotating the data in the database may include decrypting a stored value in a system with a first key to produce a decrypted value, encrypting the decrypted value with a second key to produce an encrypted value, and replacing the stored value with the encrypted value.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS [0001] This application claims the benefit of the filing date of U.S. provisional patent application Ser. No. 60 / 846,603, attorney docket no. 39866.10, filed on Sep. 22, 2006, the disclosures of which are incorporated herein by reference.BACKGROUND OF THE DISCLOSURE [0002] Typically, conventional data rotation services are tightly integrated within an application and perform services only for that particular application. A tightly integrated architecture is not suitable for managing encrypted data in high-availability, multiple application software environments where the system periodically changes encryption keys. [0003] One problem with conventional data rotation services is that in some computing environments, managing multiple data rotation services that are specific to each application becomes difficult. Managing multiple data rotation services requires multiple methods or procedures for managing each encryption key configuration, possibl...

AI Technical Summary

Benefits of technology

[0004] It would be beneficial to applications requiring high availability to provide a software system that performs all cryptography operations, including encryption key changes, using its own resources so that applications accessing the system may remain online during data rotations.

Problems solved by technology

A tightly integrated architecture is not suitable for managing encrypted data in high-availability, multiple application software environments where the system periodically changes encryption keys.

One problem with conventional data rotation services is that in some computing environments, managing multiple data rotation services that are specific to each application becomes difficult.

This added complexity makes it difficult to introduce a change to an encryption key policy, because the change must be made to each data rotation service.

Another problem with conventional data rotation services is the additional burden on available resources required to perform a data rotation.

The burden may deplete system resources, and cause the application to become unavailable or perform poorly during a data rotation.

Images